go-tools: update to 0.39.0
This no longer contains the "godoc" binary, which makes it a lot less
useful. To get an HTTP server with package docs, try "go doc -http".
mongodb: Fix bogus configure check for mongoc-1.0
Unclear what changed (scons?) but it was passing "mongoc_get_major_version();"
to the command line arguments with each character being prefixed by -l.
www/apache24: update to 2.4.66
Apache 2.4.66 (2025-12-04)
Security changes with Apache 2.4.66:
*) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
bypass via AllowOverride FileInfo (cve.mitre.org)
mod_userdir+suexec bypass via AllowOverride FileInfo
vulnerability in Apache HTTP Server. Users with access to use
the RequestHeader directive in htaccess can cause some CGI
scripts to run under an unexpected userid.
This issue affects Apache HTTP Server: from 2.4.7 through
2.4.65.
Users are recommended to upgrade to version 2.4.66, which fixes
the issue.
Credits: Mattias Åsander (Umeå University)
*) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
[43 lines not shown]
py-qt6: updated to 6.10.1
v6.10.1 5th December 2025
- Added support for `QRangeModel` (and related `QPyAbstractRange`,
`QPySequenceRange` and `QPyTableRange`).
- Fixed a regression in `pylupdate6` when using Python v3.14.
- Fixed ownership issues with the result of calls to
`createStandardContextMenu()` and `createMimeDataFromSelection()`.
woof: updated to 15.3.0
15.3.0
New Features and Improvements
Mod Support:
Improvements to Chex support (thanks to @MelodicSpaceship):
Added proper obituaries for Chex 1 in its DEHACKED file.
Added a DEHACKED file for Chex 2 which sets correct level names and fitting obituaries for Chex 2's reskinned flemoids.
Enabled brightmaps to work in the Chex 3 Vanilla IWADs as well.
Enabled ANIMATE feature for default sky and SKYDEFS.
Added support for non-power-of-2 textures.
Added support for scalex SKYDEFS field.
Added BEX mnemonic for beta pickup sprite.
Added NyanDoom widescreen patch support.
Added partial support for GAMEVERS from NyanDoom (compatibility with RUST series).
[49 lines not shown]
fq: update to 0.16.0.
# 0.16.0
## Changes
- Update gojq fork. Changes from upstream:
- Reduced memory usage for long running scripts (restore data offset when popping fork)
- Support binding expressions with binary operators, ex `1 // 2 as $v | $v`
- Fix repeating string to emit an error when the result is too large
- Fix last/1 to be included in builtins/0
- Implement toboolean/0 function
- Implement trimstr/1 function
- Increase the array index limit to 2^29
- Round up end index of slicing for jq compatibility
- Documentation fixes #1185 Thanks @emanuele6
## Format changes
[6 lines not shown]
py-acme py-certbot*: updated to 5.2.1
Certbot 5.2.1
Added
Support for Python 3.14 was added.
Changed
While nothing significant should have changed from the user's perspective,
we've been doing a lot of internal refactoring in preparation for soon adding
support for IP address certificates to Certbot.
Fixed
Removed vhost_combined and vhost_common log formats from included Apache
configuration file.
Due to a mistake on our end playing with GitHub's new immutable
[4 lines not shown]
uhid: Move generic HID code to sys/dev/hid
This change introduces a bus agnostic HID interface (sys/dev/hid/hidev.h)
and splits the uhid driver into a shareable (sys/dev/hid/uhid_common.c) and
USB specific (sys/dev/usb/uhid.c) code.
Pull up following revision(s) (requested by jmcneill in ticket #115):
sys/dev/sdmmc/sdmmc_io.c: revision 1.22
sys/dev/sdmmc/sdhc.c: revision 1.123
sdhc: Do not set auto cmd12 enable for SDIO RW extended ops
sdmmc: Use block mode for multi block SDIO transfers.
Change from OpenBSD:
https://github.com/openbsd/src/commit/5e0782b17abc2070c235843e37de911ce3f98ef8
So far the SDIO stack issued one transfer for every 64 byte to be
copied. This severely limits the speed over the bus. By using
block mode we can issue block-sized transfers, which bumps the
transfer size to at least 512 bytes. By using multi-block mode
we can copy up to 511 blocks per transfer.